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Abstract 

We propose a practical decoy state method with heralded single photon source for quantum 
key distribution (QKD). In the protocol, 3 intensities are used and one can estimate the fraction 
of single-photon counts. The final key rate over transmission distance is simulated under various 
parameter sets. Due to the lower dark count than that of a coherent state, it is shown that a 
3-intensity decoy-state QKD with a heralded source can work for a longer distance than that of a 
coherent state. 
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I. INTRODUCTION 



As is well known that, a two-mode light source, such as the state from a parametric down 
conversion (PDC) or a two-mode squeezed state takes a very important role in quantum 
information processing (QIP)Q|. Since the two modes always have same number of photons, 
one mode can be used to indicate the state of the other, therefore it is also called heralded 
single photon source (HSPS). Moreover, recent years, due to its wide applications in many 
fields, such as in quantum information and quantum radiometry etc. .the technology on how 
to efficiently obtain HSPS has been developed to a high level 

In the past few years, quantum key distribution has attracted extensive attentions for 
its unconditional security compared with conversional cryptography [ll|, [3, [3, [lj, [3, Q ■ 
However, there still exist some limitations in practice, such as imperfect single source, large 
loss channel and inefficient detectors etc.. Under such limitations, one serious threaten to 
the security is the so called photon au m he r splitting attac k Q Q Q. Fortunately, a 
number of methods and proposals have been presented for secure QKD even with these 



imperfections. These include the mixec 



and the decoy-state method 



22 



23 



_protocol[l^, the strong-reference light method 2c| . 
24|. And in this paper, what we are interested with 



is the decoy-state method. Firstly, according to the separate result of ILM-GLLP, we can 
distill a secure final key even an imperfect source is used, provided that we know the lower 
bound of fraction of single photon-counts [2 1| . The non-trivial problem on how to verify 



a tight lower bound was not answered then. Later, Hwang 22] proposed the decoy state 
method to verify such a lower faithfully. 



After that, decoy state method has been advanced by several researchers (23 , 



24, 



25 



26 



27(. The main idea there is to randomly change the intensity of each pulses among different 



values, and then deduce the lower bound of fraction of single-photon counts according to the 
observed counts of different intensities. In particular, it has been shown that, one can make 
a very tight estimation, i.e., the estimated lower bound is only a bit larger than the true 
value therefore a g ood final key rate can be obtained by only using 3 intensities, 0, //, //[^ 
or 4 intensities |25]. 

However, using the coherent states, the dark count will be significant given a distance 
longer than 100 kilometers. Naturally, one may think about using HSPS to decrease the 
effect of dark count. In fact, as it has been shown recently, an HSPS can indeed raise the 



2 



distance for QKD if one knows the channel transmittances of each photon number states 



exactly 



281 ] . However, knowing these exactly requires using infinite number of intensities. 



This seems to be an impossible task in practice. Very recently, it is proposed to use photon 



29|. 



number-resolving detectors to do decoy-state QKD with HSPS 

In this paper, we will propose a practical decoy state method with HSPS. We only need 3 
intensities and normal yes-no single-photon detectors at Bob's side. That is to say, we only 
assume the technologies that have already adopted in the existing set-ups. 

This paper is organized as follows: In Sec. II, starting from the two-mode state, we shall 
then present the main result of our protocol, i.e., the lower bound of single-photon counts. 
In Sec. Ill, we estimate the QKD distance of our method in various settings. This work is 
concluded in Sec IV. 



II. HERALDED SINGLE PHOTON SOURCE 

Given a two-mode state of the form 

oo 

\ X ) = cosh-V^^tanh^xhn). (1) 

n=0 

The averaged photon number in one mode is sinh 2 x and we shall use this value to indicate 
the pulse intensity, i.e., when we say that we use intensities of 0, /x, // for the two mode state 
as described by Eq.(l), we mean that sinh 2 x = 0,/i, //, respectively. 

As indicated in Ref. j^], after triggering out one of a photon pair, the other mode is 
basically a thermal field of distribution : 

<" -ra){i^ |0)<0|+ S [1 - (1 - (T^r^X" 1 } • (2) 

where x is the mean photon number of one mode (before triggering), tja^a for the detec- 
tion efficiency and dark count rate of Alice's detector and the post-selection probability is 
P P ost( x ) = + if^rp The detectors assumed in our protocol here are threshold detectors, 
i.e., the outcome of each individual measurement is either clicking or not clicking. 

In the protocol, we request Alice to randomly change the intensities of her pump light 
among 3 values, so that the intensity of one mode of the two mode source is randomly 
changed among 0,/i, /i' (and //>//). We define Y n to be the yield of a n-photon state, i.e., 
the probability that Bob's detector click whenever Alice sends out state \n). We also denote 

3 



the yield state p^,p M ' by Y^Y^i. In the protocol, one can immediately know the value of 
Yq by watching the counts of vacuum pulses, and one can also know the value of Y^, Y^i by 
watching the counts caused by pulses of intensity p, p' respectively. In particular, suppose 
there are N x pulses for state p x and N xt of them are triggered. During the time windows of 
these N xt pulses, Bob has observed n x clicks. Then we have Y x = n x /N xt according to our 
definition of yield. We want to deduce the value of Y\ based on the known parameters Yq, 
Y^ and Y' . Similar to the case of coherent states[3], we can verify the lower bound of Yi 
by the following constraints: 



Y ll = Y 



1 + fJL 



+ j>„ [1 " (1 - VAT] 



P' 



i=l 



[1 + fj) 



n+1 ' 



and 



d 



P 



i=i + V 

and Y x = (N xt /N X )Y X , x = p, p'. These two equations lead to 



(3) 



(4) 



;i + p) 



Y 



1 + fjf) 



;i+p' 



1 + p \1 + p' 



Y 



, Y uj 

1+p/ " 
d A ( p x 1 



l + p' V i + P 



+ VaYi 



P 



P' 



P' 



1 +fl \1 +fJL'J 1 +p' \l + p 



P 



+ j2Y n [i-(i- VA y 



n=3 



/« 2 

P v> 



(5) 



It is easy to see that for any n > 3 



(1 + p)"(l + p' 2 ) (l + p'"(l + p 2 )_ ' 

" , u,,,^ < given that //' > p. 



(l+/t) n (l+^' 2 ) (1+m'"(1+^ 2 ) 

Therefore Eq.© leads to the following inequality: 



1 fJL P 



0«A 



/i p' 



[p A (p' - p)] 



-i 



(6) 



This gives rise to the fraction of single-photon counts for the triggered pulses of different 
intensities by the following formula 

YiT] A X 



Y x P post (x)(l + xf 



(7) 
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and x can be \x or // here. Also, if we have observed the quantum bit-flip rate (QBER) 
for triggered pulses of intensity x is E x , we can upper bound the QBER value for those 
single-photon pulses by 

fl + x) 2 E x Y x - (1 + x)Y d A /2 

Normally, we use the value from x = \i for a tight estimation of e\. Given all these, we can 
use the following formula to calculate the final key-rate of triggered signal pulses: 

R > ^ ,P 7 (/i/) {-/ {Eyf) H 2 {E„) + A^') [1 - H 2 ( ei )]} (9) 

where the factor | comes from the cost of basis miss-match in Bennett-Brassard 1984 (BB84) 
protocol; f{E^i) is a factor for the cost of error correction given existing error correction 
systems in practice. We assume / = 1.2 here. H 2 (x) is the binary Shannon information 
function, given by 

H 2 (x) = — xlog 2 (x) — (1 — x) log 2 (l — x). 



III. NUMERICAL SIMULATION 

In an experiment, we only need to observe the values of Yq, Y^, and i£(/i),.Ey and 
then deduce the lower bound of fraction of single-photon counts and upper bound QBER of 
single-photon pulses by the theoretical results and then one can distill the secure final key. 

Here our goal is to theoretically estimate the final key rate of our protocol if we really did 
the experiment. In principle, whatever possible results can be observed in an experiment. In 
evaluating our the efficiency of our protocol theoretically, we shall only consider the normal 
case where there is no Eve and we calculate the key rate with respect to distance. In order 
to make a faithful evaluation, we first need a model to forecast what values for Yq, Y^, Y^, Y^ 
and E(fi),E^/ would be observed if we did the experiment in the case there is no Eve. 
After these values are estimated, we can calculate the final key rate by Eq.fjUJ) therefore the 
efficiency is evaluated theoretically. 

Suppose 7] is the overall transmittance and detection efficiency between Alice and Bob; 
tAB is the transmittance between Alice and Bob, t^B — 10~ aL//1 °; t]b is the transmittance in 
Bob's side, rj = tAB-VB- Therefore normally, the observed value for Y^, Y^ should be around 
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Y x = j jAje + y [1 ~ (1 ~ ^" fo + t _ (1 _ r] 1 (10) 

and x can be any of /x, <ie is the dark count rate of Bob's detector. This leads to 



n=l 



and = Y" x • P pos t(x) is directly used in Eq.©, Eq.© for calculating the single-photon 
counts. 

We use the following for the error rate of an n-photon state: 

= e Q d B + e d [l - (1 -r]) n ] 

d B + i-(i-v) n 

where eo = 1/2, d B is dark count rate of Bob's detectors, is the probability that the 
survived photon hits a wrong detector, which is independent of the transmission distance. 
Below we shall assume to be a constant. Therefore, the observed value should be 
around 

e d B 1 ™ ed x n jl - (I - VA Y}[\ - (I - r,Y] 

X Y x + Y x P post (x) ^ + • 1 ' 

In practical implementation of QKD, we often use the non-degenerated down-conversion to 

produce photon pairs, with one photon at the wavelength convenient for detection acting 

as heralding signal, and the other falls into the telecommunication windows for optimal 

propagation along the fiber or in open air acting as heralded signal. To illustrate the 

calculation, we assume the heralding photon is adapted to be 800nm, and the heralded 

one to be 1550nm. We shall use these formulas and experimental parameters of GYS as 

listed in table I to simulate the observed values Y^, Y^ for Eq. (jfi|7j) and the calculate the 

final key rate by Eq.(JSJ). 

We can now calculate the final key generation rate with the assumed observed values 

above. For convenience of comparing with the result of coherent states, we use the same 

n 

parameters as in GYS [31], shown in Table I, and = 10 . Our simulation results are 
shown in Fig. 1, Fig. 2 and Fig. 3. 

Fig. 1 shows with HSPS the key generation rate against transmission distance in the 
asymptotic decoy state method and in our practical two decoy state method, we use different 
intensity of weak decoy state (// = 0.01, 0.05, 0.10) respectively. From the curves in Fig. 1, we 
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FIG. 1: Tablel. Experimental parameters in GYS. 
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FIG. 2: Figl. Final key rates vs transmission distance for decoy state method 
with an HSPS source. The black solid line is the ideal result where the frac- 
tion of single-photon counts and QBER of single-photon pulses are known exactly. 
The dotted lines are the results of our 3-intensity decoy state method with /x = 
0.01,0.05,0.10, from upper to down. (// has the optimal value at each point.) 

can see that our 3-intensity decoy state method can asymptotically approach the theoretical 
limit of ideal case. 

Fig. 2 shows different key generation rate comparing HSPS = 0.8) with WCS. 
Fig. 3 shows the same objects as in Fig. 2 except with t]a = 0.6. 

From these simulations above, we can see that, our proposal can significantly raise the 
transmission distance compared with that of coherent states even with imperfect triggering 
detector (tja = 0.6). However, it has a lower key generation rate. The reasons are as follows: 
On one hand, in HSPS the dark count probability is so low by Alice's triggering system, 
there the transmission distance is raised, on the other hand, an HSPS is basically a thermal 
field which has a higher multi-photon probability than that in Poissonian distribution with 
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FIG. 3: Fig2. Comparison of final key rate between a 3-intensity decoy-state protocol with 
an HSPS source and the one with a coherent state source. The solid lines are for the ideal 
results and the dotted lines are for 3-intensity protocols. The green dotted line represents the 
result of an HSPS source (with t/a = 0.8 , \i = 0.05), and the red dotted line represents the 
results of a coherent state source (with fi = 0.05). (// has the optimal value at each point.) 




FIG. 4: Fig3. Key rate vs transmission distance. It shows the 

same objects as in Fig. 2, but here we have set r\ A = 0.6. 

the same mean photon number, therefore the key rate is decreased. 



S 



IV. CONCLUDING REMARK. 



In summary, we have presented a practical decoy state method in quantum key dis- 
tribution with a heralded single photon source. By using 3 intensities, 0, /x, //, we can 
estimate the lower bound of single-photon counts and the upper bound of single-photon 
QBER rather tightly. Moreover, our simulation results show that, the transmission distance 
of our 3-intensity decoy-state QKD protocol with HSPS is larger than that of with weak 
coherence states. Therefore, our 3-intensity decoy state method with HSPS seems to be a 
promising candidate in practical implementation of quantum key distribution. 
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Caption: 

Fig 1. Final key rates vs transmission distance for decoy state method with an HSPS source. 
The black solid line is the ideal result where the fraction of single-photon counts and QBER 
of single-photon pulses are known exactly. The dotted lines are the results of our 3-intensity 
decoy state method with fi = 0.01,0.05,0.10, from upper to down. (// has the optimal value 
at each point.) 

Fig 2. Comparison of final key rate between a 3-intensity decoy-state protocol with an HSPS 
source and the one with a coherent state source. The solid lines are for the ideal results and 
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the dotted lines are for 3-intensity protocols. The green dotted line represents the result of an 
HSPS source (with t\a = 0.8 , \i = 0.05), and the red dotted line represents the results of a 
coherent state source (with \i = 0.05). (// has the optimal value at each point.) 
Fig 3. Shows the same objects as in Fig. 2 but here we have set t]a = 0.6. 
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